Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa
File:                     a232f75c-46e8-3d93-8406-d3f904ca2565.roa (raw, json)
Hash identifier:          8GqOf5Z7RBZpc75QEz6uzx56qs3ZecZqCXMmOZQ+Rzw=
Subject key identifier:   8A:1E:E3:AB:05:E2:9B:F8:7A:C3:C4:C9:56:3E:D7:AD:1F:44:8A:A9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848E16BC21AEF131205D4D98280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     32489
IP address blocks:        2001:470:3d5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:c2:1a:ef:13:12:05:d4:d9:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=a53a7ce0-f4d1-40ce-86d5-0aba1952c1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:1e:d1:f7:3f:96:2e:11:92:e5:1a:00:a8:
                    dd:82:33:3d:b1:e6:35:bf:db:de:0d:9e:ef:f7:25:
                    29:14:62:3e:e4:79:20:01:ba:3b:22:5b:e8:8d:23:
                    a7:4f:4d:5a:91:0e:85:4b:9f:2b:51:8a:29:26:22:
                    fa:bd:fa:41:a4:3f:75:ab:1e:e7:92:ae:34:17:5a:
                    05:94:00:ee:0f:8a:68:e0:95:44:10:1a:da:16:eb:
                    e6:91:d2:9c:cb:c8:fc:50:90:92:73:e0:65:41:4e:
                    d1:d7:05:a9:bc:33:4b:bb:1e:8f:60:62:f7:ec:12:
                    10:21:a5:df:67:69:f6:08:36:39:08:b5:7f:09:b9:
                    25:59:b5:2e:6d:5e:7e:39:28:c6:21:a1:8f:e4:a2:
                    7c:9f:23:54:3b:22:52:ab:5c:67:8c:af:07:a6:11:
                    5d:17:5e:94:5a:ce:55:8b:3b:2a:ce:f6:9e:14:c9:
                    a6:50:59:c0:08:01:d5:dd:fe:41:b0:5a:23:9f:81:
                    98:b1:5e:8c:82:fc:f6:75:a7:d5:73:6f:66:4e:49:
                    b7:05:83:6a:08:24:dc:04:ee:32:fb:b2:e9:5c:7f:
                    41:f1:f6:b2:e0:74:a7:2a:61:83:34:af:5b:e8:ce:
                    e5:3b:c2:3d:88:a4:ee:29:86:40:5b:61:83:a6:10:
                    11:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:E3:AB:05:E2:9B:F8:7A:C3:C4:C9:56:3E:D7:AD:1F:44:8A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a232f75c-46e8-3d93-8406-d3f904ca2565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3d5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:98:cf:0c:ba:b2:60:61:81:3c:a1:e6:cf:57:c3:95:75:22:
         4f:0c:97:5d:84:35:0a:82:97:42:bc:a8:fb:bc:ba:2e:71:22:
         04:b7:b1:6d:d4:a7:cf:88:fb:7c:8d:3f:b2:40:a6:2a:0f:c1:
         4a:08:3b:10:e2:3b:d6:02:8a:8c:6e:d1:60:2b:a7:9d:c8:74:
         77:d5:a1:fb:00:47:a7:cb:af:e5:ee:e5:36:8c:e5:39:0c:6b:
         0c:7f:8a:bf:da:3b:ec:1e:dd:de:3e:a7:ce:b3:17:3f:99:f9:
         d5:05:21:09:9e:8e:d8:d4:de:01:b5:ea:96:e5:f2:13:48:da:
         9f:ee:11:b3:ba:a5:96:74:5c:fd:c2:0d:9b:05:32:83:14:d3:
         b1:46:be:b3:1c:e0:11:c6:0f:55:c1:b2:da:43:b2:08:d9:aa:
         8c:6c:57:dd:6d:ce:f0:b4:d4:16:4d:21:86:5b:d5:a8:58:f4:
         5e:68:02:07:9a:79:aa:6e:7b:bf:c5:0d:9b:fe:b7:9f:9f:c5:
         74:de:80:c9:95:07:9b:db:e5:e3:b0:a8:e5:7d:8c:47:ef:12:
         28:9a:1d:9e:6b:1b:01:f3:36:08:a3:d5:58:02:f8:5d:06:fe:
         7f:92:f8:b6:f1:08:27:42:29:87:d0:ed:01:2c:40:53:bc:6e:
         5c:07:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:28 2025 by rpki-client on console.sobornost.net